Bowie Bailey wrote: > > Ah. I missed the meta limiting it to 3 or more hits. If it works well, > maybe we can add it to the stock ruleset. > Step 1 would be a check in someone's sandbox. And maybe a better meta than freemail, since I do see some false positives in yahoo groups:
Spamassassin found from <x...@returns.groups.yahoo.com> at n73c.bullet.mail.sp1.yahoo.com [98.136.45.72] HELO n73c.bullet.mail.sp1.yahoo.com to <XXX> ...snip,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FROM,CAPSNOSPACE,MN_FMIWCAP,snip... Subject: Re: [RebornDollsArtistCircle] Hello so... a freemail post to a yahoo group that has three interword capitals in the groupname is a false positive (in this case, by the way, the group message _was_ spam). A not 'CAPSNOSPACE' or a not yahoogroups would be in order to solve that. CAPSNOSPACE is: # Junk with CapsCrapMessageSubjects header MN_CAPSNOSPACE Subject =~ /(?:[A-Z][a-z]+){4}/ describe MN_CAPSNOSPACE Subject ContainsFourWordsLikeThis score MN_CAPSNOSPACE 1 -- View this message in context: http://old.nabble.com/Interword-capitalization-tp31521819p31586088.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.